$ rpki-client -vvf rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa File: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (raw, json) Hash identifier: VNYYS2GDQmFWdOUq1UzUKPeHy/hhrUowLycYAkc8LZ4= Subject key identifier: E3:86:0B:6E:85:F5:40:B0:91:57:B3:83:AF:22:C0:40:03:F0:6D:11 Certificate issuer: /CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Certificate serial: 0E133553A6040D237157856138084EB439F0A939 Authority key identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa Signing time: Sun 03 May 2026 02:29:33 +0000 ROA not before: Sun 03 May 2026 02:24:33 +0000 ROA not after: Sun 02 May 2027 02:29:33 +0000 asID: 137286 IP address blocks: 49.128.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:13:35:53:a6:04:0d:23:71:57:85:61:38:08:4e:b4:39:f0:a9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Validity Not Before: May 3 02:24:33 2026 GMT Not After : May 2 02:29:33 2027 GMT Subject: CN=E3860B6E85F540B09157B383AF22C04003F06D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:de:4d:d3:c9:53:8e:5e:bb:c2:87:9f:9c: 09:2c:ee:61:21:df:2b:64:39:c4:2f:44:ed:67:7e: 51:56:ac:72:36:1f:95:86:89:0a:6d:09:b2:c4:72: cf:5a:54:9a:1e:44:6a:41:9a:81:60:f5:0c:cf:d3: 7c:9f:80:be:fa:8c:2e:08:24:ee:70:10:cb:1f:df: 8a:df:9a:88:22:7a:b8:40:18:f4:f6:2b:14:68:d7: c9:b3:58:83:07:f3:58:31:be:4f:7f:9f:2c:6d:c1: 5c:cf:cc:fa:cc:59:b9:9e:e4:a7:a9:ab:06:27:8d: 0d:a3:d6:56:4c:a1:05:3f:d7:55:84:aa:ab:4a:74: b5:55:99:06:b5:c7:8a:a2:63:04:3d:7b:50:4c:be: a4:2c:47:4f:b6:5f:c0:c0:c5:66:3f:60:2a:46:08: a0:aa:39:53:de:ca:f5:6c:d3:7b:25:7d:0f:93:98: 54:7e:37:97:3d:62:42:31:13:f6:ab:8c:cd:31:6f: 28:84:5e:db:6e:f2:d9:24:3a:c1:8d:fe:a8:38:6d: 26:19:45:13:c9:d8:92:d2:b3:55:18:04:95:17:77: 32:73:d1:79:ff:3f:13:4b:2e:50:2e:04:26:ee:b3: be:1d:11:be:dd:30:12:6d:3a:4c:40:74:64:14:f5: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:86:0B:6E:85:F5:40:B0:91:57:B3:83:AF:22:C0:40:03:F0:6D:11 X509v3 Authority Key Identifier: keyid:CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.128.188.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:a5:d0:a8:f3:e4:6e:51:4e:38:08:0d:90:01:24:db:85:57: 6c:ca:ce:2f:af:11:bf:95:16:c6:8c:62:51:7f:51:1f:90:a6: a7:37:11:4c:00:ff:f3:24:e8:26:c2:11:f7:03:bc:95:20:7c: 15:e6:a1:30:ce:af:bd:d5:04:d2:53:9b:06:28:35:4d:71:5e: fd:82:6e:7f:c2:5d:fe:aa:69:e7:2a:15:52:45:b5:74:65:d8: 5e:5e:62:f4:42:88:50:15:53:58:df:d9:3b:bb:36:b7:d4:52: c2:34:bd:89:0a:76:b5:23:74:4e:81:69:c5:c9:bd:a7:38:73: 64:2e:aa:ba:47:7b:27:4d:fb:49:77:7f:d9:f3:7b:d8:6d:7b: ae:3e:93:3b:4b:13:cd:69:b1:c5:68:db:f8:0d:d6:05:c1:c0: 77:8e:6d:3a:fd:db:c3:38:d6:69:07:82:9a:47:0c:42:0b:07: 01:ba:f0:3d:c6:e4:8b:f3:43:ba:79:28:86:2a:bd:15:72:b8: f1:96:1a:e2:88:8e:3f:17:96:be:16:f2:e2:2c:e9:83:3c:36: bf:38:73:ee:4f:27:3f:08:dc:52:1c:73:74:50:25:ac:2b:41: 97:f8:f5:c3:89:3b:f1:88:22:7e:3d:12:99:21:24:e2:eb:b5: 5a:59:57:7f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDhM1U6YEDSNxV4VhOAhOtDnwqTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZF RDdFODU0QjAeFw0yNjA1MDMwMjI0MzNaFw0yNzA1MDIwMjI5MzNaMDMxMTAvBgNV BAMTKEUzODYwQjZFODVGNTQwQjA5MTU3QjM4M0FGMjJDMDQwMDNGMDZEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0N5N08lTjl67woefnAks7mEh 3ytkOcQvRO1nflFWrHI2H5WGiQptCbLEcs9aVJoeRGpBmoFg9QzP03yfgL76jC4I JO5wEMsf34rfmogierhAGPT2KxRo18mzWIMH81gxvk9/nyxtwVzPzPrMWbme5Kep qwYnjQ2j1lZMoQU/11WEqqtKdLVVmQa1x4qiYwQ9e1BMvqQsR0+2X8DAxWY/YCpG CKCqOVPeyvVs03slfQ+TmFR+N5c9YkIxE/arjM0xbyiEXttu8tkkOsGN/qg4bSYZ RRPJ2JLSs1UYBJUXdzJz0Xn/PxNLLlAuBCbus74dEb7dMBJtOkxAdGQU9fsNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU44YLboX1QLCRV7ODryLAQAPwbREwHwYDVR0j BBgwFoAUzsciPcMWLWi1sXP1R5Zwxu1+hUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQwMmRhYTUtZmIwYy00YTI0LTk4ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RD MzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZFRDdFODU0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUM3MjIzREMzMTYyRDY4QjVCMTczRjU0Nzk2NzBDNkVEN0U4 NTRCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ0MDJkYWE1LWZiMGMtNGEyNC05 ODg5LTMzYmQ1MGRiNGZlMC8wLzM0MzkyZTMxMzIzODJlMzEzODM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM3MzIzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMYC8MA0GCSqG SIb3DQEBCwUAA4IBAQBPpdCo8+RuUU44CA2QASTbhVdsys4vrxG/lRbGjGJRf1Ef kKanNxFMAP/zJOgmwhH3A7yVIHwV5qEwzq+91QTSU5sGKDVNcV79gm5/wl3+qmnn KhVSRbV0ZdheXmL0QohQFVNY39k7uza31FLCNL2JCna1I3ROgWnFyb2nOHNkLqq6 R3snTftJd3/Z83vYbXuuPpM7SxPNabHFaNv4DdYFwcB3jm06/dvDONZpB4KaRwxC CwcBuvA9xuSL80O6eSiGKr0VcrjxlhriiI4/F5a+FvLiLOmDPDa/OHPuTyc/CNxS HHN0UCWsK0GX+PXDiTvxiCJ+PRKZISTi67VaWVd/ -----END CERTIFICATE-----Generated at Wed May 13 06:38:04 2026 by rpki-client